CVE-2019-4394

IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 contain APIs that could be used by a local user to send email

Low · published October 25, 2019

CVSS v3.0
2.3
EPSS
0%
Percentile
19.9
In the wild
Unconfirmed
What it is

IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 contain APIs that could be used by a local user to send email. IBM X-Force ID: 162232.

The record
Technical detail
CVSS v3.0
2.3 · LOW
Vector
CVSS:3.0/AV:L/AC:L/I:L/PR:H/A:N/UI:N/S:U/C:N/RL:O/E:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00285 · 19.9th percentile
Published
2019-10-25T16:30Z
EPSS history
Timeline
  • 25 OCT 16:30Z
    IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 contain APIs that could be used by a local user to send email
    cvelistv5